Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa (raw, json)
Hash identifier:          fGpzbAT6zzOfEOMmMtHHpPccNaE+zo9INksEXvUs1AQ=
Subject key identifier:   D7:E4:69:33:67:5E:58:66:3D:48:CB:14:FE:62:8C:A5:21:78:DA:DD
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       67E51B8890F81A261AC303B3ABD3226F7AB913FA
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:30 +0000
ROA not before:           Thu 16 Nov 2023 13:53:30 +0000
ROA not after:            Thu 14 Nov 2024 13:58:30 +0000
asID:                     263396
IP address blocks:        177.125.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e5:1b:88:90:f8:1a:26:1a:c3:03:b3:ab:d3:22:6f:7a:b9:13:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:30 2023 GMT
            Not After : Nov 14 13:58:30 2024 GMT
        Subject: CN=D7E46933675E58663D48CB14FE628CA52178DADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:93:3d:95:79:ed:91:1f:f5:89:27:dd:f7:
                    b8:60:02:d5:6e:7a:c6:e3:1c:c0:de:47:b6:05:6f:
                    c4:31:70:41:b9:30:80:55:e7:8f:3a:9e:26:3a:07:
                    2c:45:53:d2:b5:d8:45:af:6a:73:eb:51:51:3f:30:
                    6b:7c:cf:ff:e5:7f:95:fc:fb:45:37:e3:31:e5:99:
                    12:14:2c:b8:f1:b3:ad:9e:ae:0d:67:49:cf:2c:c7:
                    6d:fb:a5:56:e3:28:96:71:9a:21:c0:05:2d:f8:48:
                    85:89:5e:58:83:12:0a:12:ef:0b:3e:28:21:ee:52:
                    25:0a:63:1a:25:58:50:d2:12:2e:80:8e:9c:08:48:
                    f9:3e:5b:36:43:65:e9:c8:7e:36:31:4e:43:be:f0:
                    59:ec:89:33:24:4e:0d:5d:df:b5:bf:c9:1a:7e:81:
                    7e:1a:78:8d:66:cb:3b:23:97:c0:12:28:8a:05:3f:
                    f2:12:88:1d:96:78:8e:d6:2f:13:3e:8c:84:02:6d:
                    1d:f0:4b:a9:4f:54:13:68:22:52:1e:48:57:1d:b9:
                    6e:da:f6:a0:12:4b:8d:11:ab:da:94:f7:04:87:20:
                    8f:8d:38:d3:bd:87:8b:4e:ce:7b:15:9d:56:fa:49:
                    73:37:60:92:dc:44:70:dd:a7:04:cb:c0:3b:01:31:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E4:69:33:67:5E:58:66:3D:48:CB:14:FE:62:8C:A5:21:78:DA:DD
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32332d3233203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:31:e4:22:59:20:82:8a:f6:aa:db:e3:24:86:fb:f9:4f:
         f3:af:b4:c1:2a:8d:a2:74:74:10:61:fa:7b:cb:df:8c:d8:52:
         b0:03:42:09:4b:4b:20:b5:d2:b6:e4:4b:1a:11:31:e1:63:10:
         14:3e:0f:37:59:c7:3c:f5:94:c9:cf:af:48:51:00:f2:73:ff:
         86:41:be:09:57:d9:de:df:ef:ff:59:f4:a6:8b:ee:c4:77:00:
         42:f4:4b:e9:5d:25:8d:26:08:be:83:b7:9a:cf:ae:60:13:bf:
         15:16:fe:ab:e3:c2:bd:16:0e:f8:b1:25:96:40:dd:67:32:17:
         a3:c1:89:a1:41:ec:1c:1b:01:cd:bf:6b:63:4f:93:06:88:f7:
         c8:1f:7d:d4:08:6a:a4:27:c7:82:29:ee:a6:8c:11:0b:70:35:
         90:33:c7:6c:06:94:57:55:77:62:8a:75:e3:cd:7b:98:9b:13:
         ff:b9:b2:0f:93:2d:78:59:9c:0e:b9:5f:9e:f7:bd:bc:ba:f8:
         5e:be:9a:7d:83:d4:25:24:4e:8d:7b:94:66:ac:34:49:64:cc:
         6b:7b:29:e4:76:1a:fa:5f:ea:7f:7a:1d:1d:0b:76:e2:53:de:
         dd:42:06:ab:e5:40:97:9a:90:93:ae:4f:71:30:40:fd:ec:ec:
         6d:40:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org